| Author |
Message |
The Frustrated Monk
Guest
|
 Posted:
Thu Feb 24, 2005 6:48 am Post subject:
Issue with automatic system lock GPO |
|
|
We are running a Windows 2000 domain with over 10,000 user accounts. Have a
GPO linked at the domain level to automatically lock systems after 15 minutes
of idle time.
For the most part, it has gone flawlessly. However, there are a small
handful of users who are experiencing issues. One example is that it kicks
off after 5 minutes. Desktop support has verified that this is indeed
happening and not an exageration on the user's end. Another complaint is that
it hangs their systems.
Since it is working for almost all users I feel that the GPO is fine and
that the issue is a desktop/user profile issue.
Anyone experience something similar? |
|
| Back to top |
|
 |
Steven Umbach
Guest
|
| Posted:
Thu Feb 24, 2005 6:48 am Post subject:
Re: Issue with automatic system lock GPO |
|
|
Is the issue related to computer or users?? In other words does it happen to
all computers they logon to or just a particular computer?? Does it happen to
all users that logon to that computer? If it happens to them for all computers,
then it sounds like they are having different Group Policy applied to them then
the rest of the users. If it happens on only a particular computer, then that
computer may not be receiving current Group Policy. Gpresult can show what Group
Policies are being applied to the user and computer including the last time the
policy was applied and from what domain controller. Netting should also be run
on the computer if it is a computer specific problem to make sure that the
computer can find and connect to a domain controller. Secedit can also be used
to force an update of Group Policy. --- Steve
http://support.microsoft.com/kb/227302
"The Frustrated Monk" <The Frustrated Monk@discussions.microsoft.com> wrote in
message news:BA1563E2-31F1-4042-B08D-FAFB0F025C41@microsoft.com...
| Quote: | We are running a Windows 2000 domain with over 10,000 user accounts. Have a
GPO linked at the domain level to automatically lock systems after 15 minutes
of idle time.
For the most part, it has gone flawlessly. However, there are a small
handful of users who are experiencing issues. One example is that it kicks
off after 5 minutes. Desktop support has verified that this is indeed
happening and not an exageration on the user's end. Another complaint is that
it hangs their systems.
Since it is working for almost all users I feel that the GPO is fine and
that the issue is a desktop/user profile issue.
Anyone experience something similar? |
|
|
| Back to top |
|
|
The Frustrated Monk
Guest
|
| Posted:
Thu Feb 24, 2005 10:47 pm Post subject:
Re: Issue with automatic system lock GPO |
|
|
I have a request in with desktop support to run gpresult on a few of the
machines as well as have users test on another system. No one at my location
is experiencing any issues so I am having to rely upon others to do the work.
The sad part is desktop support does not know what secedit or gpresult is :-(
On a few users that we had to exclude, running "secedit /refreshpolicy
user_policy /enforce" did not work. They had to reboot and login to clear the
settings.
I'll post the result as soon as I get the data. |
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in